WEBAUTHN

Browser API for public-key authentication.

Definition

WebAuthn exposes navigator.credentials.create() for registration, navigator.credentials.get() for authentication. Supports Resident Keys (Discoverable Credentials), User Verification (biometric/PIN), Attestation (authenticator cert chain). v3 in 2025 draft adds conditional UI passkeys autofill.

Origin

W3C Web Authentication Working Group active since 2015 ; v1 Recommendation published 4 March 2019 ; v2 published 8 April 2021.

Example in context

Gmail offers WebAuthn login with Yubikey or Touch ID directly in the browser — 1-click = login.

Related terms

• Passkeys — cloud sync extension.